SUSE Image Update Advisory: sles-15-sp1-chost-byos-v20210304 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2021:413-1 Image Tags : sles-15-sp1-chost-byos-v20210304:20210304 Image Release : Severity : important Type : security References : 1170671 1177460 1177533 1178775 1179326 1179691 1179691 1179738 1180520 1180603 1180603 1180885 CVE-2019-8842 CVE-2020-10001 ----------------------------------------------------------------- The container sles-15-sp1-chost-byos-v20210304 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:265-1 Released: Mon Feb 1 15:06:45 2021 Summary: Recommended update for systemd Type: recommended Severity: important References: 1178775,1180885 This update for systemd fixes the following issues: - Fix for udev creating '/dev/disk/by-label' symlink for 'LUKS2' to avoid mount issues. (bsc#1180885, #8998)) - Fix for an issue when container start causes interference in other containers. (bsc#1178775) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:266-1 Released: Mon Feb 1 21:02:37 2021 Summary: Recommended update for lvm2 Type: recommended Severity: moderate References: 1177533,1179326,1179691,1179738 This update for lvm2 fixes the following issue: - Fixes an issue when boot logical volume gets unmounted during patching. (bsc#1177533) - Fix for lvm2 to use 'external_device_info_source='udev'' by default. (bsc#1179691) - Fixed an issue in configuration for an item that is commented out by default. (bsc#1179738) - Fixed an issue when after storage migration major performance issues occurred on the system. (bsc#1179326) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2021:285-1 Released: Tue Feb 2 13:08:54 2021 Summary: Security update for cups Type: security Severity: moderate References: 1170671,1180520,CVE-2019-8842,CVE-2020-10001 This update for cups fixes the following issues: - CVE-2020-10001: Fixed an out-of-bounds read in the ippReadIO function (bsc#1180520). - CVE-2019-8842: Fixed an out-of-bounds read in an extension field (bsc#1170671). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:293-1 Released: Wed Feb 3 12:52:34 2021 Summary: Recommended update for gmp Type: recommended Severity: moderate References: 1180603 This update for gmp fixes the following issues: - correct license statements of packages (library itself is no GPL-3.0) (bsc#1180603) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:301-1 Released: Thu Feb 4 08:46:27 2021 Summary: Recommended update for timezone Type: recommended Severity: moderate References: 1177460 This update for timezone fixes the following issues: - timezone update 2021a (bsc#1177460) * South Sudan changes from +03 to +02 on 2021-02-01 at 00:00. - timezone update 2021a (bsc#1177460) * South Sudan changes from +03 to +02 on 2021-02-01 at 00:00. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:304-1 Released: Thu Feb 4 13:19:43 2021 Summary: Recommended update for lvm2 Type: recommended Severity: important References: 1179691 This update for lvm2 fixes the following issues: - lvm2 will no longer use external_device_info_source='udev' as default because it introduced a regression (bsc#1179691). If this behavior is still wanted, please change this manually in the lvm.conf ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:307-1 Released: Fri Feb 5 05:30:34 2021 Summary: Recommended update for libselinux Type: recommended Severity: low References: 1180603 This update for libselinux fixes the following issues: - Corrected the license to public domain (bsc#1180603) ----------------------------------------------------------------- Advisory ID: SUSE-OU-2021:339-1 Released: Mon Feb 8 13:16:07 2021 Summary: Optional update for pam Type: optional Severity: low References: This update for pam fixes the following issues: - Added rpm macros for this package, so that other packages can make use of it This patch is optional to be installed - it doesn't fix any bugs. The following package changes have been done: - cups-config-2.2.7-3.20.1 updated - device-mapper-1.02.149-12.40.1 updated - libcups2-2.2.7-3.20.1 updated - libdevmapper-event1_03-1.02.149-12.40.1 updated - libdevmapper1_03-1.02.149-12.40.1 updated - libgmp10-6.1.2-4.6.1 updated - libselinux1-2.8-8.3.1 updated - libsystemd0-234-24.72.1 updated - libudev1-234-24.72.1 updated - pam-1.3.0-6.29.1 updated - systemd-sysvinit-234-24.72.1 updated - systemd-234-24.72.1 updated - timezone-2021a-3.44.1 updated - udev-234-24.72.1 updated